I once worked in a small office and was told a story about a previous employee who offered to hold down the fort while the rest of the office went to lunch. While they were gone he watched porn. Knowing that activity was logged, he was clever enough to use someone else's computer. He was not clever enough to consider that he had just verbally confirmed to a dozen coworkers that he would be the only one in the office at the time.

I haven't done help desk work since I was in college. I would guess the attack vectors are the same since then. Stupidity (clicking a fake system dialogue, etc. user intentionally did x but didn't realize that it was), JavaScript exploits (drive by downloads, etc), and maybe less commonly torrented or downloaded content containing malware. 1 and 2 are hard to distinguish once infected and are only really caught off your checking history or DNS queries. 3 has the benefit of occasionally being caught by another system before the user gets a bad download.

How about doing both not at work? You can have as much sex as you want and watch as much porn as you want, but please outside of your work environment.

A doctor needs to be educated how to watch porn at work?

Puritans love to shame others for sex. It's insane.

Was the correct answer, "Ask my supervisor?"